[rancid] Re: Who made changes?
daniel.medina at gmail.com
Wed Apr 1 19:05:33 UTC 2009
On Tue, Mar 31, 2009 at 06:13:15PM +0000, john heasley wrote:
> correlated changes to AAA command accounting records, the only reliable way.
I'll add on more idea to this: proxy requests through a wrapper with authentication.
Even if you have kit that doesn't support / use AAA, force changes to go through a wrapper which logs access and keystrokes.
clogin provices a good starting point for this :)
More information about the Rancid-discuss